The short version: we collect only what we need to run the service. We don't sell your data. Your documents are encrypted and private. You can delete your account and all data at any time.
When you use QRYall, we may collect:
We do not use your data for advertising. We do not sell your data to third parties. We do not use your documents to train AI models.
Documents uploaded to the vault are stored on IONOS servers in the EU. Invisible ownership signatures are encrypted with AES-256. The encrypted signature is stored in our database and can only be decrypted by you, using your account credentials.
Public verification pages show only the document title, protection date and type never the document content or your invisible signature.
When someone scans your QR code, we log: the QR code UID, timestamp, IP address and user agent string. This data is shown to you in your analytics dashboard. We do not link scan data to individual people's identities.
We use a single session cookie to keep you logged in. We do not use tracking cookies, advertising cookies or third-party analytics.
Depending on your location, you may have the right to access, correct or delete your personal data. To exercise these rights, email privacy@qryall.com or delete your account directly from Settings.
We use HTTPS for all connections, bcrypt for password hashing, and AES-256 encryption for document signatures. Uploaded files are stored with randomised names and are not publicly guessable.
We use IONOS for hosting and storage. Payment processing is handled by Stripe, which has its own privacy policy. We do not share your data with any other third parties.
We will notify registered users by email of any material changes to this policy. The "last updated" date at the top reflects the most recent revision.
Privacy questions: privacy@qryall.com